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SUBJECT:  OECD:  MEETING  OF  THE  WORKING  PARTY  ON  INFORMATION 
SECURITY  AND  PRIVACY  (WPISP),  MARCH  3-4,  PARIS 

1.1.  SUMMARY:  The  meeting  of  the  WPISP  centered  on 

discussions  to  finalize  the  Working  Party's  contributions  to 
the  OECD  Ministerial  on  the  Future  of  the  Internet  Economy 
that  will  take  place  in  Seoul,  Korea  in  June.  In  addition, 
the  Working  Party  considered  its  future  work  program  for  the 
next  two  years,  which  will  likely  cover  several  important 
emerging  issues  in  security  and  privacy.  END  SUMMARY. 

1.2 . John  Rodgers,  EEB/CIP/MA,  led  the  U.S.  delegation 
consisting  of  USG  agencies  and  private  sector  representatives 
to  the  meeting  of  the  WPISP  in  Paris.  Other  members  of  the 
U.S.  delegation  were  the  following: 

- Christina  Speck,  NTIA 

- Narda  Jones,  FCC 

- Thomas  Dukes,  DOJ 

- Jade  Nester,  State 

- John  Kropf,  DHS 

- J.  Scott  Mathews,  ITA 

- Hugh  Stevenson,  FTC 

- Amy  Alvarez,  (private  sector) 

1.3 . Occuring  immediately  prior  to  the  meeting  of  the  Committee 
for  Information,  Computer  and  Communications  Policy  (ICCP), 
the  meeting  focused  on  finalizing  key  documents  for  ICCP ' s 
consideration  in  advance  of  the  OECD  Ministerial  on  the 
Future  of  the  Internet  Economy.  The  WPISP  completed  its 
contributions  to  the  OECD  Ministerial,  by  forwarding  a 
recommendation  to  the  ICCP  that  several  documents  be 
declassified.  These  included  the  joint  OECD-APEC  work  on 
malware  and  the  Radio  Frequency  Identifier  (RFID)  Policy 
Guidelines . 

14.  The  Working  Party  discussed  its  priorities  for  the  OECD 
Program  of  Work  and  Budget  (PWB)  for  2009-2010.  The  WPISP 
weighed  support  within  the  group  for  new  projects  in  the  next 
cycle  of  work  (2009-2010)  and  the  following  projects  and 
areas  of  future  work  appeared  to  attract  the  most  support: 

- Global  Privacy  Dialogue, 

- Digital  Identity  Management, 

- Malware  (continued  work) 

- Sensor-based  Environments 

- Cross-border  Enforcement  on  Privacy 

15.  In  addition,  the  member  countries  discussed,  but  did  not 
come  to  a final  decision  about,  the  concept  of  establishing 
an  OECD  web-based  Support  Platform  for  International 
Regulatory  Networks  ("SPIRE")  to  assist  member  country 
agencies  in  their  work  to  enforce  consumer  protection  and 
privacy  laws.  The  consensus  on  this  issue  at  the  meeting  was 
that  more  work  is  necessary  in  the  interim  and  at  the  next 
session  of  WPISP  to  clarify  scope  and  content  of  this 
possible  project.  The  U.S.  interagency  group  will  discuss  in 
the  coming  weeks  its  positions  on  this  and  the  other  future 
work  areas  and  will  participate  actively  in  the  process  of 
crafting  the  WPISP  work  program. 

16.  The  possible  impact  of  the  review  of  candidate  countries 


on  the  Working  Party's  workload  was  also  a point  for 
discussion  in  plenary.  Because  of  the  process  of  reviewing 
the  readiness  of  new  candidate  members  (Chile,  Slovenia, 
Israel,  Russia)  to  join  the  OECD  will  entail  considerable 
work  on  the  part  of  each  constituent  group  in  the  OECD,  the 
WPISP  delegates  took  note  of  the  possible  impact  on  the 
resources  of  the  Working  Party  in  carrying  out  other 
projects.  The  U.S.  observed  that  this  is  an  important  task 
coming  from  the  OECD  Council  and  that  the  WPISP  should  be 
mindful  of  the  resource  implications,  both  in  time  and 
budget,  for  the  group. 

f.7 . Finally,  WPISP  members  elected  a new  Bureau  consisting  of 
8 member  countries  for  the  next  year.  The  U.S.  Bureau 
member,  Hugh  Stevenson  (Federal  Trade  Commission),  was  newly 
elected  this  year.  He  replaces  Robin  Layton  of  Commerce/ITA. 

Other  members  on  the  Bureau  are  from  Australia  (Chair), 
Portugal,  Japan,  Korea,  Norway,  Canada  and  the  UK. 

T_8 . The  next  meeting  of  the  WPISP  will  take  place  November 
17-18,  2008,  in  Paris. 
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